pivotalcli looks first for `--token` and `--project` flags. If that fails it looks for `PIVOTAL_[TOKEN|PROJECT]` env vars. If that also fails, it walks up your file tree until it finds a `.pivotal.json` file with `TOKEN` and `PROJECT` keys, eg: